---
title: "Get IP intelligence data"
method: GET
path: "/verify/v1/ip"
tags: ["IP Intelligence"]
---

# Get IP intelligence data

`GET /verify/v1/ip`

Retrieves comprehensive information about an IP address including threats, geolocation, and network details

## Query parameters

- `address` string, required

## Response `200`

IP intelligence data retrieved successfully

- RestverifyIpIntelligenceResponse — Response containing IP intelligence data including threats, geolocation, and network information
  - `ip` RestverifyIpIntelligenceRecord — Comprehensive information about an IP address
    - `geolocation` RestverifyIpIntelligenceGeolocation — Geographic location information for the IP address
      - `city` string — City name required: false
      - `country` string — Country name required: true
      - `countryIso` string — ISO 3166-1 alpha-2 country code required: true pattern: ^[A-Z]{2}$
      - `isEuropeanUnion` boolean — Indicates if country is in the European Union required: true
    - `ipAddress` string — IP address being analyzed required: true pattern: ^(?:[0-9]{1,3}\.){3}[0-9]{1,3}$
    - `network` RestverifyIpIntelligenceNetwork — Network information for the IP address
      - `asn` string — Autonomous System Number required: true pattern: ^AS\d+$
      - `domain` string — Network domain required: false
      - `name` string — Network name required: true
      - `route` string — Network route (CIDR notation) required: true pattern: ^(\d{1,3}\.){3}\d{1,3}/\d{1,2}$
      - `type` string — Network type required: true enum: business,hosting,isp,education,government
    - `organization` RestverifyIpIntelligenceOrganization — Organization information associated with the IP address
      - `domain` string — Organization domain required: false
      - `linkedin` string — LinkedIn profile URL required: false format: uri
      - `name` string — Organization name required: false
    - `threats` RestverifyIpIntelligenceThreats — Threat intelligence indicators for the IP address
      - `isCloudRelay` boolean — Indicates if IP is a cloud relay required: true
      - `isDatacenter` boolean — Indicates if IP belongs to a datacenter required: true
      - `isMobile` boolean — Indicates if IP belongs to a mobile network required: true
      - `isProxy` boolean — Indicates if IP is a proxy required: true
      - `isTor` boolean — Indicates if IP is a TOR exit node required: true
      - `isUnallocated` boolean — Indicates if IP is unallocated required: true
      - `isVpn` boolean — Indicates if IP is a VPN required: true
    - `time_zone` RestverifyIpIntelligenceTimeZone — Timezone information for the IP address location
      - `abbr` string — Timezone abbreviation required: true example: CET
      - `current_time` string — Current time in the timezone required: true format: date-time
      - `is_dst` boolean — Indicates if daylight saving time is active required: true
      - `name` string — IANA timezone name required: true example: Europe/Berlin
      - `offset` string — UTC offset required: true pattern: ^[+-]\d{4}$
  - `requestId` string
  - `status` string — Status indicates the result of the operation ("success" or "error")

## Other responses

- `400` — Invalid IP address format
- `401` — Unauthorized - Missing or invalid API key
- `500` — Internal server error

## Changes

- **2026-07-17** `73526747b270` — 2 info
  - api tag `IP Intelligence` added
  - api tag `Verify API` removed
- **2024-09-10** `32a769da53f1` — 1 info
  - endpoint added
- **2024-09-10** `1ee4ed170cfa` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/customeros/apis/customeros-api/changes/verify/v1/ip/get.md)

---

[API](https://skmtc.dev/customeros/apis/customeros-api.md) · [All operations](https://skmtc.dev/customeros/apis/customeros-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/customeros/customeros-api/revisions/73526747b270/schema)